Versions Compared

Old Version 9

changes.mady.by.user Unknown User (ke4qqq)

Saved on

compared with

New Version 10

changes.mady.by.user Unknown User (mjc)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: add back section about board authority as that's imporrtant

...

How security reports are handled (https://www.apache.org/security/)

The ASF has a security team and a VP of security and acts with board authority.

The ASF encourages responsible disclosure of security vulnerabilities discovered in software managed by ASF projects.  The ASF security team sets a common policy, maintains security contacts for PMCs, and provides support for projects responding to security issues. Reporters are encouraged to use the designated security contacts to report vulnerabilities privately.  PMCs are required to respond to security reports promptly, working with reporters to investigate and if necessary develop patches.  

...